$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/64f6934a-0fa4-3b8c-81e9-92d0a13313a9.roa File: 64f6934a-0fa4-3b8c-81e9-92d0a13313a9.roa (raw, json) Hash identifier: KgpfZdf/bdJYZKLfV7R9noAR5t6XENHS3Iqd0EqvBJk= Subject key identifier: 7F:C6:19:0C:CD:57:82:8F:90:E8:FC:30:FF:88:E0:52:20:E4:1A:DF Certificate issuer: /CN=dac5cea7-cd25-4a27-9b63-bd82366932b1 Certificate serial: 010D0C9F4328584F0D6CD4E32D72657F0A8D6F80 Authority key identifier: F8:90:52:1B:08:0F:56:22:0A:C1:68:0A:45:A1:58:77:CB:57:3E:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/64f6934a-0fa4-3b8c-81e9-92d0a13313a9.roa Signing time: Thu 03 Sep 2026 13:00:12 +0000 ROA not before: Thu 03 Sep 2026 13:00:12 +0000 ROA not after: Wed 02 Dec 2026 14:00:12 +0000 asID: 396502 IP address blocks: 66.248.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/dac5cea7-cd25-4a27-9b63-bd82366932b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/dac5cea7-cd25-4a27-9b63-bd82366932b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:6c:d4:e3:2d:72:65:7f:0a:8d:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dac5cea7-cd25-4a27-9b63-bd82366932b1 Validity Not Before: Sep 3 13:00:12 2026 GMT Not After : Dec 2 14:00:12 2026 GMT Subject: CN=7d4d467b-6d40-4c7b-9209-c21fa2ed0920 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:3d:96:b8:3e:23:cb:79:3d:8d:36:94:5e:15: 06:13:5f:46:7c:ae:68:ad:46:af:49:70:61:d6:0a: 2d:5d:3a:2c:53:54:7a:c5:f6:c5:86:7f:80:3a:4e: 88:b9:82:c5:70:8d:87:f6:d9:9d:59:6a:b2:34:52: 95:ae:ac:8c:92:be:a2:16:20:85:9d:a7:29:77:38: 83:c1:0a:32:bd:b4:6e:00:43:f2:6d:f5:c2:73:6b: 47:dc:f0:97:37:c7:46:7e:34:95:5a:1b:83:f1:d6: 1a:03:d3:ea:42:ad:cf:df:cd:b6:6c:39:67:fb:8d: 6e:34:06:ec:ce:77:a1:62:32:b2:b1:af:70:14:80: 8c:0e:e5:4a:fb:54:29:49:f6:fb:6e:2b:3a:84:82: 4f:ce:60:5a:80:35:52:70:3e:6a:74:48:08:63:b4: 4a:ac:45:2a:e9:b4:56:24:d5:f0:b9:25:cb:74:73: d6:61:72:68:a4:91:79:59:15:2c:84:d6:1f:bc:7d: a9:a6:88:30:09:d5:fc:3c:a8:4a:ce:6e:37:8a:67: 04:6d:f7:c9:e9:6e:86:2f:6c:62:2f:4f:08:bd:b7: c7:42:67:4d:f8:1d:27:6b:8a:d4:e2:01:56:eb:1b: 38:d7:0a:a1:be:6b:89:0b:6d:27:97:0e:ae:49:0a: 26:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:C6:19:0C:CD:57:82:8F:90:E8:FC:30:FF:88:E0:52:20:E4:1A:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/64f6934a-0fa4-3b8c-81e9-92d0a13313a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/dac5cea7-cd25-4a27-9b63-bd82366932b1.crl X509v3 Authority Key Identifier: keyid:F8:90:52:1B:08:0F:56:22:0A:C1:68:0A:45:A1:58:77:CB:57:3E:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1.cer sbgp-ipAddrBlock: critical IPv4: 66.248.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:eb:16:e9:f0:9a:75:be:4b:d7:06:98:0b:fe:cf:08:6e:9a: cc:a0:be:4e:22:5a:9c:7e:c1:03:3e:34:7a:41:32:c0:04:e0: b9:e4:5a:6c:24:2d:45:ac:2c:ec:ca:7f:50:64:a5:d2:28:4e: 71:b9:93:3d:e8:06:8a:e5:d0:2b:c6:64:6d:a3:44:8b:f7:66: 09:19:38:a8:59:70:fe:c0:bd:15:ef:57:62:bc:30:c7:45:d2: d4:13:2e:e8:2f:03:59:8f:6c:61:98:bc:a4:82:bc:b3:93:bf: b1:f6:c3:72:d7:06:06:e0:45:ed:fb:d5:4e:89:09:c2:d7:30: 15:48:6f:bb:75:a8:4a:45:ed:38:8d:8a:8b:40:8b:67:64:6e: b2:61:6d:a3:64:23:0e:3c:60:28:b4:44:ce:2e:86:c9:99:2c: 8a:49:38:0f:b0:d2:d9:de:06:67:1d:cd:8d:6d:f2:86:73:37: 6c:c4:f0:4e:d3:da:7c:01:7a:69:cc:44:14:3d:06:04:a4:07: b1:01:f7:fd:e8:dd:25:97:f5:d6:55:49:04:c4:5e:28:ed:cb: a7:ae:4a:4d:c7:a2:53:ce:d6:97:ee:d6:5d:16:21:ed:44:09: 24:d0:78:96:c2:3e:c3:ae:3b:cb:2a:49:8d:b7:cf:48:6d:0d: 9d:09:a0:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8NbNTjLXJlfwqNb4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFjNWNlYTctY2QyNS00YTI3LTliNjMtYmQ4MjM2Njkz MmIxMB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk N2Q0ZDQ2N2ItNmQ0MC00YzdiLTkyMDktYzIxZmEyZWQwOTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkD2WuD4jy3k9jTaUXhUGE19GfK5orUavSXBh 1gotXTosU1R6xfbFhn+AOk6IuYLFcI2H9tmdWWqyNFKVrqyMkr6iFiCFnacpdziD wQoyvbRuAEPybfXCc2tH3PCXN8dGfjSVWhuD8dYaA9PqQq3P3822bDln+41uNAbs znehYjKysa9wFICMDuVK+1QpSfb7bis6hIJPzmBagDVScD5qdEgIY7RKrEUq6bRW JNXwuSXLdHPWYXJopJF5WRUshNYfvH2ppogwCdX8PKhKzm43imcEbffJ6W6GL2xi L08IvbfHQmdN+B0na4rU4gFW6xs41wqhvmuJC20nlw6uSQomwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH/GGQzNV4KPkOj8MP+I4FIg5BrfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kYWM1 Y2VhNy1jZDI1LTRhMjctOWI2My1iZDgyMzY2OTMyYjEvNjRmNjkzNGEtMGZhNC0z YjhjLTgxZTktOTJkMGExMzMxM2E5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZGFjNWNlYTctY2QyNS00YTI3LTli NjMtYmQ4MjM2NjkzMmIxL2RhYzVjZWE3LWNkMjUtNGEyNy05YjYzLWJkODIzNjY5 MzJiMS5jcmwwHwYDVR0jBBgwFoAU+JBSGwgPViIKwWgKRaFYd8tXPl4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kYWM1Y2VhNy1jZDI1LTRhMjctOWI2My1iZDgy MzY2OTMyYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQvjnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGfrFunwmnW+S9cGmAv+zwhumsygvk4iWpx+wQM+NHpBMsAE4LnkWmwk LUWsLOzKf1BkpdIoTnG5kz3oBorl0CvGZG2jRIv3ZgkZOKhZcP7AvRXvV2K8MMdF 0tQTLugvA1mPbGGYvKSCvLOTv7H2w3LXBgbgRe371U6JCcLXMBVIb7t1qEpF7TiN iotAi2dkbrJhbaNkIw48YCi0RM4uhsmZLIpJOA+w0tneBmcdzY1t8oZzN2zE8E7T 2nwBemnMRBQ9BgSkB7EB9/3o3SWX9dZVSQTEXijty6euSk3HolPO1pfu1l0WIe1E CSTQeJbCPsOuO8sqSY23z0htDZ0JoEA= -----END CERTIFICATE-----Generated at Sat Oct 10 17:18:52 2026 by rpki-client